stage-api.meetwithpuffin.com

Issued by Amazon

About this certificate

This digital certificate with serial number 05:14:74:8a:d2:57:1b:ca:78:fc:ca:a9:f9:93:6a:67 was issued on by Amazon.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=stage-api.meetwithpuffin.com

Amazon

Organization: Amazon
Organization unit: Server CA 1B
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 05:14:74:8a:d2:57:1b:ca:78:fc:ca:a9:f9:93:6a:67
Serial Number (int): 6752349674192886326981754368422013543
Serial Number lenght: 123 bits, 16 octets

SubjectKeyId: 82:8d:3c:6f:b1:16:86:96:d1:cb:5b:f9:75:cf:9a:65:46:f6:37:0d
AuthorityKeyId: 59:a4:66:06:52:a0:7b:95:92:3c:a3:94:07:27:96:74:5b:f9:3d:d0

Fingerprint (sha1): 9a:46:0b:23:52:c1:b0:3e:f7:6c:b7:cb:6b:3e:a4:09:0e:17:97:d2
Fingerprint (sha256): 15:f1:0d:42:e5:40:2a:a6:da:db:16:88:2a:f4:ea:ee:a2:c8:40:33:fc:00:5c:b7:a9:c7:2c:ed:df:fc:51:6e

Issuing Certificate URL: http://crt.sca1b.amazontrust.com/sca1b.crt

Revocation information

OCSP Server: http://ocsp.sca1b.amazontrust.com
CRL Distribution Point: http://crl.sca1b.amazontrust.com/sca1b.crl

Check the revocation status for certificate stage-api.meetwithpuffin.com

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for stage-api.meetwithpuffin.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

stage-api.meetwithpuffin.com
stage-puffin.all-turtles.com

Other certificates including the domain name meetwithpuffin.com

(limited to 100 certificates)
greetyourway.com
dev-api.meetwithpuffin.com
www.meetwithpuffin.com
www.gkcki.com
api.meetwithpuffin.com
stage-api.meetwithpuffin.com
hbcuchange.com
www.exploradogs.com
areapaciente.clinicabaviera.com
www.fundthepeoplemiami.com
nucleus.partners.medics.academy
competitions.primaverbis.in
*.meetwithpuffin.com
gorumlu.zeplinx.com
www.app.homolog.beseed.com.br
www.cliftleighcarwash.com
live.topia.tv
www.aasthahospital.co.in
canopy.tychobra.com
hanoi.hackjunction.com
www.ahatovaraida-biologiya.com
weluz.com
secure-dev.myvaillant.com
kyleandalissa.com
*.meetwithpuffin.com
api.meetwithpuffin.com
stab.ai
nazerelmahata.com
stage-api.meetwithpuffin.com
www.meetwithpuffin.com
www.jnimmigrationservices.com
moonphase-software.com
meetwithpuffin.com
avoidsociety.app
iot.stritzinger.at
r.untilgone.com
campus.cegepsl.qc.ca
stage.meetwithpuffin.com
www.angularjs.org
www.mannshahia.com
simulator.soppkontroll-app.no
singinglessonsleicester.com
nazerelmahata.com
www.budgetal.com
elenfairy.com
www.meetwithpuffin.com
meetwithpuffin.com
www.jeroengoudsmit.nl
christinegilbert.ca
www.senkimsin.xyz

Certificate

The complete raw certificate details for stage-api.meetwithpuffin.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw0Md0VHNlOr36VloK3Rj
1YInBuu7YmLTtDoYisKhtHeRBd01rnOnit1bArrh1sbFgBUrvtf7XVIS+hyDEkeF
BSmu5Fl8dsGWcxQoy5JmJAfSpnC/yQ8EAPEP2GNMWupJ9SY4Eiu6WGkwnQgAyCeK
mQPR56k3npAxtHGSz02sxNzKMOT5NqwHZQWtQ2L4UeIbPHNcA6trJoR4jCW4Gu47
xVOjeHCM+4eINXNyWDuw4/OGdsMbrXmxN7fr1ejmyTvW25VlOki+wbTrtvEDknZb
CM4F+EHTTv4PudkuijS21dNjo5StV4F+QG6UE/4hWlTaZE59P/7RWfH2vT7d9IxB
EwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 6752349674192886326981754368422013543
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Server CA 1B'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-07-09 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-08-09 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'stage-api.meetwithpuffin.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24649565835827348559533499856224614772584911339172060481912646855150990426972051574768475464065706681723240994921608899687772973612149530830471281194889811467139139442592092435283608474977701066714322760150320678927546994860908611613502125422030939238802430763986161637264855303048991987933126015064648487889780873438540205797001744574970971630344917058133877983766367902184712648563740269264260836866646157932749593344445909938275191451007572931498928679879894047749487762457364183660847214575685236885002124451309720201696811765741536341793620561323452119167277739283972317473804531024404501477744955807044828152083
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 59a4660652a07b95923ca394072796745bf93dd0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							828d3c6fb1168696d1cb5bf975cf9a6546f6370d
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (62 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage-api.meetwithpuffin.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage-puffin.all-turtles.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.sca1b.amazontrust.com/sca1b.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (25 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.2 (digiCertDVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.sca1b.amazontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.sca1b.amazontrust.com/sca1b.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007600a4b90990b418581487bb13a2cc67700a3c359804f91bdfb8e377cd0ec80ddc100000016bd8362ac10000040300473045022100b7e448c89e0e7d0a33d685b35be095b5900308a5e5cbe0a7855b66f2db32a75702203b9a69511735da546a0222b107060dd7ea39cb03f7e57964898a6dcf97ba8e280076008775bfe7597cf88c43995fbdf36eff568d475636ff4ab560c1b4eaff5ea0830f0000016bd8362b1200000403004730450220609eb7431f94502a22ecd1f328e0a4eadaa8f2b6a3eb66bfa60d30ce13fb7ac10221009dc2ee5f465a4e16cc00ba60051a6864b4179d444d7e95f3e6a32fc36df3bf4c
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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